sign in--:--:--UTC

CVE-2026-64849

exploited in the wild☆ pin

CVSS

9.3

Reports

3

First seen

Aug 18, 2026

Last seen

Aug 19, 2026

Affected product

MLflow < 3.15.0

Recent reports

MLflow security advisory – CVE-2026-64849 added to CISA KEV database

Canadian Centre AlertsAug 19, 2026 High

CISA Adds MLflow SSRF Vulnerability to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesAug 19, 2026 Critical

Attackers Exploit MLflow SSRF and FUXA Path Traversal Flaws to Steal Cloud Credentials

The Hacker NewsAug 18, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans